String sql = "insert into news values(null,'" + newsActionForm.getNewTitle() + "','" + newsActionForm.getNewContent().replaceAll("'","/''") + "','"+ newsActionForm.getNewPictures() + "','" + newsActionForm.getNewsType() + "',now())";
其中newsActionForm.getNewContent().replaceAll("'","/''") 起到关键作用